Lucene search

MitreCVE-2014-8473

HistoryNov 04, 2014 - 8:55 p.m.

CVE-2014-8473

2014-11-0420:55:04

CWE-352

mitre

web.nvd.nist.gov

cve-2014-8473

cross-site request forgery

csrf

vulnerability

ca cloud service management

csm

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

Cross-site request forgery (CSRF) vulnerability in CA Cloud Service Management (CSM) before Summer 2014 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Affected configurations

Nvd

Node

cacloud_service_managementRange≤2014spring

VendorProductVersionCPE
cacloud_service_management*cpe:2.3:a:ca:cloud_service_management:*:spring:*:*:*:*:*:*

Vendor	Product	Version	CPE
ca	cloud_service_management	*	cpe:2.3:a:ca:cloud_service_management::spring::::::*

References

www.ca.com/us/support/ca-support-online/product-content/recommended-reading/security-notices/ca20141103-01-security-notice-for-ca-cloud-service-management.aspx

www.securityfocus.com/bid/70925

www.securitytracker.com/id/1031214

exchange.xforce.ibmcloud.com/vulnerabilities/98536

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.3

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

Related for CVE-2014-8473